EUVD-2023-35373

Malicious code in bioql PyPI...

EUVD-2022-0320

Malicious code in bioql PyPI...

EUVD-2022-0285

Malicious code in bioql PyPI...

EUVD-2024-38698

Malicious code in bioql PyPI...

EUVD-2025-23830

Malicious code in bioql PyPI...

EUVD-2025-23840

Malicious code in bioql PyPI...

EUVD-2022-0328

Malicious code in bioql PyPI...

EUVD-2025-23829

Malicious code in bioql PyPI...

EUVD-2025-23049

Malicious code in bioql PyPI...

EUVD-2024-15888

Malicious code in bioql PyPI...

EUVD-2025-23828

Malicious code in bioql PyPI...

EUVD-2025-23849

Malicious code in bioql PyPI...

EUVD-2025-4074

Malicious code in bioql PyPI...

EUVD-2025-23835

Malicious code in bioql PyPI...

EUVD-2022-0291

Malicious code in bioql PyPI...

EUVD-2024-39639

Malicious code in bioql PyPI...

text-generation-inference: Unbounded external image fetch in validation leads to resource-exhaustion DoS

Description Text Generation Inference Router DoS via pre-validation image fetch in VLM mode. Affected: Router workspace version 3.3.6 the latest repo, when deployed with a vision/VLM model e.g., Idefics/Mllama/Idefics2/Idefics3/Gemma3/Llama4/Paligemma/LlavaNext/Qwen2VL/Qwen25VL. Pure text LLMs do...

Integer Overflow lead to DOS in API `v2/models/<model-name>/infer`

This report is not public...

Dynamic Causal Attack Graph Based Cyber-Security Risk Assessment Framework for CTCS System

Protecting the security of the train control system is a critical issue to ensure the safe and reliable operation of high-speed trains. Scientific modeling and analysis for the security risk is a promising way to guarantee system security. However, the representation and assessment of the...

SecInfer: Preventing Prompt Injection Via Inference-Time Scaling

Prompt injection attacks pose a pervasive threat to the security of Large Language Models LLMs. State-of-the-art prevention-based defenses typically rely on fine-tuning an LLM to enhance its security, but they achieve limited effectiveness against strong attacks. In this work, we propose...